Windows Forum

Ask something
Discussion Locked

Adding domain users

0 helpful
3 replies

by gcheels

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I recently promoted a server to a domain controller. There are three other DC's in my network, all are at different locations. When I try to add a user on my server I get an error message, "Windows cannot add the object because the Directory Service was unable to allocate a relative identifier". I can "Connect To A Domain Controller" and specify one of the other DC's in the network and add the user OK. The changes are reflected on my server so it appears that replication is working. Why can't I add users on my DC and have it replicate to the other DC's instead of having to add the user on another DC and have it replicate to my DC.

3 replies

by edrossius

In Active Directory, DCs have to play what is called "The 5 Master Roles". Two roles are assigned at Forest level, the last ones are at domain level. One domain level master role is "Relative ID master role". There is only one ID master server in a domain. You said your DCs are at different locations. Maybe, in your situation, your DC cannot contact the ID Master Server (for any reason).
Also, check your DNS. Since you are on different locations, It is best to configure your server as a secondary or active directory-integrated server for your DNS zone. With a 'local' DNS, il will be easier to contact the First-installed server of your domain.

This discussion is closed to new replies.